Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File:                     PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier:          41PvGGoB3s5Hl5J21xk0OZIyjmeBXPj8iN0e2FVlP2E=
Subject key identifier:   83:75:59:F7:93:28:1D:E4:A9:DA:89:08:F3:4E:2C:F9:40:47:A5:1D
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer:       /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial:       01974B1F988D3394779C8DCC1761C40A17DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number:          0F85
Signing time:             Sat 07 Jun 2025 16:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:51 +0000
Files and hashes:         1: DTkkXlwWhjBYM7E-LiW8oFBHJjI.roa (hash: cFY01vIGbPqfZkXvhIFJCumwHCyy8N/DU0Sq4RcHFF0=)
                          2: F-tWEgFXNk85dgLML3v4CjJQNJI.roa (hash: KLZ5Ryps6kGcz+Vvj/Jt1Z7hc5rWBKew1n0+/36PDXM=)
                          3: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: OieYPuVIAIqjelPyEZq6tAf6CJi02i4SJatLWWduyfc=)
                          4: PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa (hash: 69CNmBY++9WnYAnXQ2BFsg1ecbH6Dliq6fHkpb2sLS4=)
                          5: c_bN0qeZ98kLK_mj8jLJCUhCuDk.roa (hash: 6teRR+6kz/ZhchnuaFTgHT4htaDxgUNTDG0QN1bVrBA=)
                          6: f3EQDAp01aGz4ygf13OnfmgCiyU.roa (hash: K8CWfwsXMWBETuXajB8y0tfb/O1sIwj6IWVOuqi5a0s=)
                          7: fnn2PBqaEkB-G35nmktclyOEVrM.roa (hash: z4jXqUIY33n8wsiIhXSfBMidI9YSQa2N+6IYP0IxcVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:98:8d:33:94:77:9c:8d:cc:17:61:c4:0a:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
        Validity
            Not Before: Jun  7 16:00:51 2025 GMT
            Not After : Jun  8 16:00:51 2025 GMT
        Subject: CN=837559f793281de4a9da8908f34e2cf94047a51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:b3:ed:1c:bd:70:0d:05:3f:0e:4b:b8:67:
                    50:7c:2a:78:84:6c:a2:d7:b3:94:40:80:31:5b:bb:
                    a4:10:0e:78:a1:23:86:7a:2f:3b:12:ad:b1:ad:b7:
                    8c:98:3c:3b:72:34:24:12:c9:65:bd:62:db:88:e6:
                    27:94:40:a1:d1:c1:e6:aa:1d:11:f8:36:04:c7:c7:
                    4d:c7:5f:66:bc:f7:ad:5b:a9:3c:42:09:26:39:a0:
                    7a:c8:20:d6:b5:3f:ba:20:a5:de:1f:c4:0f:25:c1:
                    57:5b:1e:73:da:92:e8:23:6a:d0:81:e6:0c:d5:45:
                    e0:47:a9:7b:7a:48:fc:29:de:d7:fa:b4:fb:2b:c8:
                    76:3b:53:38:7e:70:b7:3d:58:f0:5e:c1:ad:eb:d5:
                    5f:dc:56:3b:1d:8b:7a:08:9b:18:5b:53:7c:4e:c1:
                    0c:35:74:47:42:6a:7f:db:fe:bd:8b:98:87:f9:dc:
                    f5:75:34:0d:d0:fd:85:f2:8d:97:e8:78:51:d3:49:
                    da:94:f8:4c:4e:d2:9f:fc:3f:ac:cd:37:91:ef:78:
                    04:08:f1:22:f9:fc:e6:f1:85:f4:47:51:8a:d1:ce:
                    f7:96:08:b3:0f:ca:49:6e:76:80:8d:a7:25:8a:af:
                    30:ed:b5:df:c3:53:bd:e2:1f:b2:a0:1a:6d:d4:42:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:75:59:F7:93:28:1D:E4:A9:DA:89:08:F3:4E:2C:F9:40:47:A5:1D
            X509v3 Authority Key Identifier:
                keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:ba:a9:6a:4c:95:8b:a3:b8:6d:3f:df:37:3f:5c:d8:2c:
         a4:20:85:4c:e1:9c:5d:bb:0c:cd:28:5d:b0:b6:76:03:96:68:
         94:55:f6:f9:d7:a9:08:42:b0:42:5d:6a:39:fb:eb:5f:0d:6d:
         bc:ee:51:c3:6f:8a:65:a7:4c:24:24:cd:14:79:cb:02:9b:08:
         12:25:19:8f:4e:67:93:98:83:f9:35:67:94:7b:57:8a:9e:97:
         d7:50:73:e8:dd:d1:d1:27:1e:7e:6d:34:66:81:8e:65:96:de:
         40:89:9c:16:76:55:e1:2a:70:76:42:9b:2d:9e:e8:60:44:eb:
         1b:8f:c9:01:50:6f:a2:de:ef:3e:f5:22:fc:0b:34:34:5e:92:
         52:37:78:ce:e4:39:e0:d0:84:c0:e0:3e:b4:d9:20:1d:74:fc:
         dd:c4:c8:b0:dc:ab:c9:1c:db:de:37:fd:9e:1a:7c:9a:b9:14:
         f3:71:7b:cc:c1:cb:7b:9d:99:82:3d:c6:84:44:11:47:bd:3f:
         b2:b5:d4:ee:09:60:f4:eb:cc:0f:26:57:7b:6c:2e:01:ba:24:
         cb:74:9a:92:07:71:96:8e:f6:e9:d2:16:b8:93:f3:af:64:6d:
         49:e8:83:ea:51:41:ef:78:5b:5e:c5:bd:3d:eb:0a:03:8c:9b:
         b6:17:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:59 2025 by rpki-client